- MagicDNS now returns SERVFAIL on upstream failures and adds TCP support; Android can act as an exit node and ExitNodeStatus is exposed in status JSON.
- Added extensive DNS and port‑mapper enhancements: Linux split DNS for cloud providers, Windows registry tweaks for AD, macOS CGNAT route handling, and support for NAT‑PMP, PCP, and UPnP.
- Fixed reliability bugs: tailscale ping -c N now exits correctly, Powershell hostname ping works, link‑local IPv6 suppression, and raised the minimum iOS version to 15.